CVE-2014-2655

SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated…

published April 2, 2014

CVSS
—
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01884 · 79.2th percentile
Published
2014-04-02T14:00Z
EPSS history
Timeline
  • 02 APR 14:00Z
    SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated…
    cvelistv5